AGENT'S ACTIVITY SUMMARY 


Control Number j^^^^^^^^^^d 


TIME, DATE, AND AGENT 


SUMMARY OF INVESTIGATIVE ACTIVITY 



2:00 Investigative 



BASIS FOR INVESTIGATION: 



IHQ-CCIU, 



On 8 M ar 11, this office received an email from| 

ilino^Banalysis of a Demand Lelter (dated 11 Feb 11) re 
(Washington Metro Resident Agency, CCIU) from| 
Homelsma^ecuntyrw^ (HSI), 601 West 26th Street, Suite 700, New York, NY 

1 0001 . | (stated that CCIU was beino^skea^oprovid^upport for the 

search of media belonging to Mr. David M. HOUSE cind( (which was 

previously copied and detainea^^^S^mmigration and Customs Enforcement (ICE) on 3 
Nov 10 (Chicago) and( (respectively. Specifically, | 

Jstated that once all the pieces were in place, Kwould request this 
office to develor^ncHmDiemen^^ro^ pertinent keywordsJikelyto identify 

data related to( (< '^jkM^u^^i^^nJ ^Hl n 

HOUSE seized by ICE and provide the rcsu.ts( (before being 

forwarded to ICE. 



0:20 Investigative 
0:01 Investigative 



About 1300, 20 Apr 11, | (coordinated with ( (who 

provided a formaUeauesyor forensic support to comply with th e IC E Dema nd Le tter 
Dertaining to the I (and HOUSE med a. In support of ((request, HI 

|provideo^h^jocuments "ice_border_search_electronic_devices.pdr' 
and "ICE Demand Lettei ( (& House. pdf" via email. 



AbouM31^0Apr 
BancTlC 




Dr 11,| Irccoivod and reviewed an email from | 

|relating that although responsive data from media belonging to both 
HOUSE would be provklgcUf^CF the privilege review would only be 
conducted over responsive data fromB (media. 



04/20/2011 13:19 



Case Initiation 



0:01 Investigative 
04/20/2011 13:32 



0:05 Investigative 
04/20/2011 13:36 



0:01 Investigative 
04/20/2011 13:38 



0:01 Investigative 
04/20/2011 14:00 



About 1332, 20 Ap r 1 1 , | (drafted and sent the 1 st Information Report to | 

] informing^Jthat^(was assigned to complete^^-equest and 
piiiwnliini^Bllii' I H \'\\ CAF number. 



Created new entit 




ith data copied from! 



Created new entity (Entity ID Number 2306508) with data copied from HOUSE, David 
Maurice (Entity ID Number 2224697). 

DELAYED ENTRIES: 



3:00 Investigative 



On 18 Mar 1 1,( (provided 

methodology for executing a search of the 
the legal privilege review, when required. 




via email) with a proposed 
and HOU SE media and facilitating 
agreed with the proposal. 



On 4 Apr 1 1 ,^^ ^^^^^^Brocer/ed lists o f keywords proposed by personnel familiar with 

ihp( BnndB (irvo^ligatinns for future use in searching the 

land HOUSE media according to the methodology proposed on 18 Mar 11. 



04/20/20^4j30 
1:00 Investigative 



|completed additional documentation, physical case file, and Investigative 

Plan and submitted the fie for CIC review. 
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AGENT'S ACTIVITY SUMMARY 


Control Number 






TIME, DATE, AND AGENT 


SUMMARY OF INVESTIGATIVE ACTIVITY 



0:20 Criminal Intelligence 



3:00 Investigative 
04/26/2011 10:00 



4:00 Investigative 
04/27/2011 06:54 



4:00 Investigative 
35/06/2011 09:50 



0:01 Investigative 
05/09/2011 09:00 



0:05 Investigative 



1 1Q:C 



4:00 Investigative 




0:30 Investigative 
05/10/2011 10:00 



3:00 Investigative 
05/11/2011 07:30 



4:00 Investigative 
05/12/2011 07:30 



6:30 Investigative 
05/12/2011 14:00 



0:20 Investigative 
05/13/2011 07:30 



1:00 Investigative 
05/16/2011 07:30 



4:00 Investigative 
05/17/2011 07:30 



5:00 Investigative 



Crim Intel Review. Entered all available case data in UCID. Returned case file to case 
agent. 



Obtained forensic images from 



and began forensic processing. 



Continued forensic processing of submitted media. 



Continued forensic processing of submitted media. 



Delay from 28 Apr - 5 May 1 1 for examiner bereavement leave. 



Provided in-proore ss update^r^maiUo | 

| and ft5&£S£3jjjP and related that the keyword search on the 
Imedia was still running (since last Friday) and already had over 48 million hits. 
Suggested a meeting to trim the keyword list to a manageable number or place relative 
importance on groups of keywords (tier approach). 

Continued forensic processing of submitted media. 



coordinated and revised the keyword 
search terms for the^S55»IHmedia. 

Continued forensic processing of submitted media. 
Continued forensic processing of submitted media. 
Continued forensic processing of submitted media. 

Coordinated with K^i^.Juft.'»'i> ^^who reviewed the potentially relevant results from 
the keyword searching of the HOUS^TjediaJjowever, no data pertinent to this 
investigation was identified by MlO^^^^^^Sj 

Continued forensic processing of submitted media. 
Continued forensic processing of submitted media. 
Continued forensic processing of submitted media. 
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AGENTS ACTIVITY SUMMARY 


Control Number 






TIME, DATE, AND AGENT 


SUMMARY OF INVESTIGATIVE ACTIVITY 



Q5/1 7/2011 08:40 



0:30 Investigative 
2:00 Investigative 



8:30 Investigative 
05/20/2011 07:- 



2:30 Investigative 
05/23/2011 08:00 




3:00 Investigative 
05/23/201 ' 



0:30 Investigative 
05/23/2011 15:00 



0:05 Investigative 
05/24/2011 07:30 



3:00 Investigative 
05/25/2011 08:00 



6:00 Investigative 



4.00 Investigative 
05/27/2011 08:00 



2:00 Investigative 



2:00 Investigative 

2:30 Investigative 
05/31/2011 08:45 



0:30 Investigative 



Drafted and sent u pdate to| 
■via email. 



Continued forensic processing of submitted media. 
Continued forensic processing of submitted media. 
Continued forensic processing of submitted media. 
File to SAC for review. 

Continued forensic processing of submitted media. 

SAC REVIEW: 

1. Looks good. Continue 

Acknowledged SAC review. 

Continued forensic processing of submitted media. 

Continued forensic processing of submitted media. 

Continued forensic processing of submitted media. 

Continued forensic processing of submitted media. 

Continued forensic processing of submitted media. 

Continued forensic processing of submitted media. 



Provided update to l 

|via email pertaining to the current status of this examination. 
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AGENT'S ACTIVITY SUMMARY 


Control Number 






TIME, DATE, AND AGENT 


SUMMARY OF INVESTIGATIVE ACTIVITY 



05/31/2011 10:00 



4:30 Investigative 
06/01/2011 08:00 



2:00 Investigative 



3:00 Investigative 
06/06/2011 08:00 



6:00 Investigative 

7:00 Investigative 
06/08/2011 09:00 



0:05 Investigative 



oh 



1:00 Investigative 
06/09/20^0^00 

0:05 Investigative 
06/10/2011 08:00 



0:05 Investigative 
06/11/2011 09:15 



0:20 Investigative 
06/13/2011 07:45 



0:05 Investigative 
06/13/2011 08:00 



0:30 Investigative 
06/13/2011 11:00 



0:15 Investigative 

06n3/20^4j00 
2:30 Investigative 



Continued forensic processing of submitted media. 
Continued forensic processing of submitted media. 
Continued forensic processing of submitted media 
Continued forensic processing of submitted media. 

Comple ted forensic processing of submitted media. Awaiting review of results bvB 

neither of whom are available to 



Coordinated with| |aid| 
review the material until 9 Jun 1 1 . 



Forced to shut down forensic systems due to heat in the lab. Will attempt to re-open case 
when cooling is restored; however, it will most likely take 8+ hours for the case to reopen. 

Check on status of EnCase case file; still reopening. 



Coordinated >;Vilh| |who related ICE would be in the AOR on Tuesday 

morning for a briefing on any material found as a result of this examination. 



Check on status of EnCase case file; still reopening. 



Briefedl 



|and|_ 
Icoordinate withl 

the trip to VA. 



Jon the results of this examination. Requested 
(to advise ICE of the findings before they make 



Coordinated .7i>i| plio stated the ICE agents are already traveling to VA 

and can me et here at( (at 1400. ^(further stated that ICE will be satisfied with| 
(characterization of findings and there is no need to examine any data in 

EnCase. 

AbouM400^3Jun 1 1 , 

(met With | (and | ( Immigrat ons 

and Customs Enforcement (ICE). New York^no^riefed then^^aNaspects of the 
forensic exa mination of the HOUSE and | | media. | (stated that | 

~| assessment that no data was found that constituted evidence of a crime (and 
would justify ICE's seizur e of the materi als) reinforced ICE's previous (but limited) 
examination of the data. I ■further stated that the requests in the ICE Demand 
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AGENT'S ACTIVITY SUMMARY 


Control Number ||j^U^^i?^'Sfel^ 


TIME, DATE, AND AGENT 


SUMMARY OF INVESTIGATIVE ACTIVITY 



Letter were satisfied and all data related to this action should be destroyed. 



06/16/20^9^02 
0:15 Investigative 



Drafted and sent a final information report by e mail to | 

No formal report (AIR, forenisc re port, etc' 

will be generated for this action |~ 

The original forensic notes will be maintained in the CAF file 

Case file updated, closure request sent, and file turned in to SAC for final review and 
closure, then routing through CIC and IOT. 
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